Understanding  Temporal  Logic 


Introducing 

Coherent  Object  System  Architecture 

(COSA) 


By 

Gordon  Morrison,  Author 


Breaking  the  Time  Barrier 


BREAKING  THE 

TIME  BARRIER 


TEMPORAL  ENGINEERING  OF  SOFTWARE 

A [lymm  On> 


GORDON  E.  MORRISON 


www.vsmerlot.com 


Report  Documentation  Page 


Form  Approved 
OMB  No.  0704-0188 


Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 


1.  REPORT  DATE 

APR  2010 


2.  REPORT  TYPE 


3.  DATES  COVERED 

00-00-2010  to  00-00-2010 


4.  TITLE  AND  SUBTITLE 

Understanding  Temporal  Logic  Introducing  Coherent  Object  System 
Architecture  (COSA) 


5a.  CONTRACT  NUMBER 


5b.  GRANT  NUMBER 


5c.  PROGRAM  ELEMENT  NUMBER 


6.  AUTHOR(S) 


5d.  PROJECT  NUMBER 


5e.  TASK  NUMBER 


5f.  WORK  UNIT  NUMBER 


7.  PERFORMING  ORGANIZATION  NAME(S)  AND  ADDRESS (ES) 

VS  Merlot, League  City, TX, 77573 


8.  PERFORMING  ORGANIZATION 
REPORT  NUMBER 


9.  SPONSORING/MONITORING  AGENCY  NAME(S)  AND  ADDRESS  (ES) 


10.  SPONSOR/MONITOR’S  ACRONYM(S) 


11.  SPONSOR/MONITOR’S  REPORT 
NUMBER(S) 


12.  DISTRIBUTION/AVAILABILITY  STATEMENT 

Approved  for  public  release;  distribution  unlimited 


13.  SUPPLEMENTARY  NOTES 

Presented  at  the  22nd  Systems  and  Software  Technology  Conference  (SSTC),  26-29  April  2010,  Salt  Lake 
City,  UT.  Sponsored  in  part  by  the  USAF.  U.S.  Government  or  Federal  Rights  License 


14.  ABSTRACT 


15.  SUBJECT  TERMS 


17.  LIMITATION  OF 

18.  NUMBER 

ABSTRACT 

OF  PAGES 

Same  as 

32 

Report  (SAR) 

16.  SECURITY  CLASSIFICATION  OF: 


a.  REPORT 

unclassified 


b.  ABSTRACT 

unclassified 


c.  THIS  PAGE 

unclassified 


19a.  NAME  OF 
RESPONSIBLE  PERSON 


Standard  Form  298  (Rev.  8-98) 

Prescribed  by  ANSI  Std  Z39-18 


The  Challenge 


BREAKING  THE 

TIME  BARRIER 


TEMPORAL  ENGINEERING  OF  SOFTWARE 

A [lymm  On> 


Using  the  traditional  spatial  If-Then-Else  (ITE) 
approach 

-  Produce  a  five-function  calculator 

-  add,  subtract,  multiply,  divide,  and  percent 
The  specification  is  at:  www.vsmerlot.com 
Count  the  number  of  ITE  and  Case  Statements 

-  Count  every  logic  decision  point 

-  Don’t  use  my  temporal  COSA  approach 

-  Did  you  improve  on  COSA? 
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Proper  State  Machines 


•  In  a  proper  state  machine,  the  state  transitions  are  all 
complete  and  orthogonal. 

-  Complete  Transitions:  a  transition  is  defined  for  every 
possible  situation. 

-  Orthogonal  Transitions:  none  of  the  transitions  have 
overlapping  conditions. 

•  With  a  proper  state  machine 

-  a  next  state  is  defined  for  every  possible  condition 

-  the  designated  next  state  is  unique 


•  My  comment: 


BREAKING  THE 

TIME  BARRIER 


-  The  proper  state  machine  is  spatial  using  ITE 

-  The  proper  state  machine  doesn’t  know  where  it’s  working 


©  2005  Carnegie  Mellon  University  -  PSP  II  Designing  and  Verifying  State  Machines-  page  41 
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ITE  Calculator  Statechart 

ITE  State  Diagram-Calculator 


•  The  author’s 
implementation: 

-  112  ITE /Case 

•  Ready  -  6  case 

•  Eval  -  4  case  +  ? 

-  1,000+ LOC 

•  Arrows  represent 
transitions 

-  Transitions  are  events 

•  Minus  is  an  ambiguous 
transition 

•  Begin  to  negate  1 

•  subtract 

•  opEntered  to  negated2 


calc 
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ITE  Calculator  Call  Diagram 


No  calls  to  trace 
display 

Very  complex 
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ITE  Call  Diagram  -  Calculator 


dispState 

begin 

ojDprlmd2 

frac2 

4 - — " 
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ITE  State  Machine 


QHsm::CQSTATE  Calcl::opEntered(QEvent  const  *e) 
switch  (e->sig)  { 
case  Q  ENTRY  SIG: 
dispState("opEntered"); 
return  0; 

case  IDC  OPER: 
dispState(“IDC  Entered"); 
if  (((CalcEvt  *)e)->keyld  ==  IDC_MINUS) 
clear(); 

Q_TRAN(&Calcl::negatedl); 

} 

return  0; 
case  IDCO: 

dispState(“IDC  0  Entered"); 
clear(); 

Q_TRAN(&Calc  1 :  :zero  1 ); 
return  0; 


Trace  debug  is 
everywhere  in  code. 


BREAKING  THE 

TIME  BARRIER 


‘Practical  Statecharts  in  C/C- 


tse  IDC19: 

dispState(“IDC  1-9  Entered"); 
clear(); 

insert(((CalcEvt  *)e)->keyld); 
Q_TRAN(&Calcl::intl); 
return  0; 

case  IDC  POINT: 
clear(); 

dispState(“IDC  Point  Entered"); 
insert(IDCO); 

insert(((CalcEvt  *)e)->keyld); 
Q_TRAN(&Calcl  ::fracl); 
return  0; 

} 

return  QSTATE_SC(&Calcl::calc); 


} 
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ITE  With  Debugging 

/  \ 

ITE  Call  Diagram  Trace  Added  -  Calculator 
v _ J 


•  ITE  trace 

-  Red  lines  . . . 

•  Trace  debug 

-  Each  function 

-  Embedded 

-  Side  effects 
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Calls  to  Trace 


fra  cl 


result 


operandl 


ready 


negatedl 


clear 


negated2 
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COSA  vs.  Traditional  ITE 


Temporal  domain 

-  Time  Indexed 

Reduces  complexity 

-  State  diagrams 

-  Call  diagrams 

-  Models 

Reduces  code  size 
Increases  reuse 
Includes  trace 
Preemptable 


Spatial  domain 

-  Find  where  last 

Increases  complexity 

-  State  diagrams 

-  Call  diagrams 

-  Models 

Increases  code  size 
Decreases  reuse 
Manual  trace 
~Not  Preemptable 
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Temporal  vs.  Spatial 

•  Imagine  a  CPU  without  a  program  counter  (PC) 

-  The  hardware  would  need  to  save  states  continuously 

-  After  an  interrupt  determine  where  it  was  executing 

-  Massive  amount  of  logic  as  administrative  overhead 

-  This  is  spatial 

•  The  PC  is  a  temporal  pointer 

•  Software  does  not  have  an  equivalent  PC 

-  Until  COSA  was  invented  (see  US  Patent) 
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•  Engine/Table  relationship 

-  Table  contains  1  or  more  rules 

-  Each  rule  has  a  single  entry  point 

•  Rules  consist  of  steps 

•  Every  step  is  a  binary  state 

-  Each  step  has  a  test  condition 

•  a  True  Behavior  /  Next  Rule/Step  Transition 

•  a  False  Behavior  /  Next  Rule/Step  Transition 

•  and  a  Trace  (tied  to  the  specification) 
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COSA  State  Machine 

•  Event  or  non-event  driven  applications 

•  States  are  true  or  false 

-  Transitions  are  next  true  or  next  false 

•  Three  fundamental  parts 

-  Engine  (temporal,  trace,  and  control) 

-  Logic-Flow  /  Rule  Table  (class) 

-  Data-Flow  /  Reusable  Members 

•  Logic-flow  is  orthogonal  to  data-flow 
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COSA  Pattern 


•  One  or  more 
engine/table 
pairs 

•  Tracing 

—  Duo  Point 

•  True  Trace 

•  False  Trace 


BREAKING  THE 

TIME  BARRIER 


TEMPORAL  ENGINEERING  OF  SOFTWARE 

A [lymm  On> 


GORDON  E.  MORRISON 


www.vsmerlot.com 


12 


Engine  /  Table  Pattern 


Engine 

•  Engine  is  temporal  (iTime) 

•  Preemption  control 

-  Test  condition  (state) 

•  Dynamic  bind  True  Behavior 

-  Next  True  Rule/Step 

-  True  Trace 


Table 

•  Each  row  is  a  temporal 
sequence 

-  Rule/Step  (name) 

-  Test  condition  (state) 

•  True  Behavior 


•  Dynamic  bind  False  Behavior 

-  Next  False  Rule/Step 

-  False  Trace 


-  End  preemption  control  loop 
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TEMPORAL  ENGINEERING  OF  SOFTWARE 
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-  Next  Tme  Rule/Step 
•  False  Behavior 

-  Next  False  Rule/Step 

-  Trace  (unique  to  app) 
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COSA  Engine  Detail 


BREAKING  T>  E 

TIME  BAR  L_ 


TEMPORAL  ENGINEERING  OF  SOFTWARE 


procedure  TCOSAFrame.Run(intState  integer); 
begin 

bEngine  :=  TRUE; 
iState  :=  intState; 

while  bEngineLocal  AND  bEngineGlobal  do 

begin 

if  iState  =  rRule[iTime]. iState  then 
begin 

rRule  [iT  ime]  .pT  rueRule; 

T  rue_T  race(iT  ime); 
iTime  :=  rRule  [iTime]. iTrueRule; 

—  end  else 
begin 

rRule  [iT ime]  .pF alseRule ; 
FalseTrace(iTime); 
iTime  :=  rRule[iTime].iFalseRule; 
end; 


end; 

end; 
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TEMPORAL  ENGINEERING  OF  SOFTWARE 
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23-Steps  of  Calculator  Logic 
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The  User  Perspective 

(tends  to  be  temporal) 


•  Calculator 


-  Enter  Operand  1 

-  Enter  Operation 

-  Enter  Operand  2 

-  Select  Result  Type 


(optional  sign) 

(+-*/) 
(optional  sign) 

(=  %  (+  -  *  /)) 


•  The  user  perspective  is  generally  temporal 


•  Enter ‘-’‘3’ 


4  ? 


‘4’  ‘1’ 
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Understanding  the  Time  Index 


ENTER 

Rule 

State 

True  Action 

Next  True 

False  Action 

Next  False 

rOperl 

=  <iNeg44>? 

Negate 

rOper+1 

Ignore 

rOper+1 

‘3’ 

+1 

=  <iDigit>* 

AnyNumber 

rOper+1 

Ignore 

rOper+2 

• 

+2 

=  <iDot59>? 

OnePeriod 

rOper+3 

Ignore 

rOperl+4 

‘14159’ 

+3 

=  <iDigit>* 

AnyNumber 

rOperl+3 

Ignore 

rOperl+4 

Time-> 

+4 

•  I  know  where  I  am 

•  I  know  where  I  came  from 

•  I  know  where  I  am  going 

•  At  iTime+4  -  Not  a  number  from  iTime+3 
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Logic  and  Trace 


Rule 

State 

True  Action 

Next 

False  Action 

Next 

Trace 

rOperl 

iNeg44 

Negate 

rOperl+1 

Ignore 

rOperl+1 

100 

+1 

iDigit 

Any_Number 

rOperl+1 
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rOperl  +2 

101 

+2 

i  Dot  59 

One Period 

rOperl+3 

Ignore 

rOperl  +4 

102 

+3 

iDigit 

Any_Number 

rOperl+3 

Ignore 

rOperl  +4 

103 

Time  +4 
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T 

TR 

DS 

Behavior 

Value 

1 

100 

44; 

Negate; 

N=  - 

2 

101 

i; 

Any  Number; 

N=  -3 

3 

101 

59: 

Ignore: 

N= 

4 

102 

59; 

One Period; 

N=  -3. 

5 

103 

1; 

Any Number; 

N=  -3.1 

6 

103 

1; 

Any  Number; 

N=  -3.14 

7 

103 

i; 

Any  Number; 

N=  -3.141 

8 

103 

1: 

Any  Number: 

N=  -3.1415 

9 

103 

1; 

Any N  umber; 

N=  -3.14159 

10  103 

44; 

Ignore; 

N= 
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Some  ITE  Logic 


QHsm::CQSTATE  Calcl::opEntered(QEvent  const  *e)  { 
switch  (e->sig)  { 
case  Q  ENTRY  SIG: 
dispState("opEntered"); 
return  0; 

case  IDC  OPER: 
dispState(“IDC  Entered"); 
if  (((CalcEvt  *)e)->keyld  ==  IDC_MINUS)  { 
clear(); 

Q_TRAN(&Calcl  ::negatedl); 

} 

return  0; 
case  IDCO: 

dispState(“IDC  0  Entered"); 
clear(); 

Q_TRAN(&Calc  1 :  izerol); 
return  0; 


BREAKING  THE 

TIME  BARRIER 


case  IDC19: 

dispState(“IDC  1-9  Entered"); 
clear(); 

insert(((CalcEvt  *)e)->keyld); 
Q_TRAN(&Calcl  ::intl); 
return  0; 

case  IDC  POINT: 
clear(); 

dispState(“IDC  Point  Entered"); 
insert(IDCO); 

insert(((CalcEvt  *)e)->keyld); 
Q_TRAN(&Calcl  ::fracl); 
return  0; 

} 

return  QSTATE_SC(&Calcl::calc); 

} 


“Practical  Statecharts  in  C/C++,  ©  CMP  Books,  Miro  Samek,  Ph.D. 
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Compare  COSA  Trace 


COSA  Trace 

T  TR  DS  Behavior  Value 


1 

100  44 

Negate;  N=  - 

2 

101 

1 

Any_Number;  N= 

3 

101  59 

Ignore;  N= 

4 

102  59 

One_Period;  N=  - 

5 

103 

1 

Any_Number;  N= 

6 

103 

1 

Any_Number;  N=  -i 

7 

103 

1 

Any_Number;  N= 

8 

103 

1 

Any_Number;  N= 

9 

103 

1 

Any_Number;  N=  -i 

10  103  44 

Ignore;  N= 
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To  ITE  Trace 


T  Behavior  e->siq  Value 


OOO 

19,  g-negatedl,  2,  0 

20,  negated  1 

21,  g-negatedl,  1,  -0 

22,  g-negatedl,  1010,  -0 

OOO 

31,  inti 

32,  g-intl ,  1 ,  -3 

33,  g-intl,  1101,  -3 

34,  g-fracl ,  0,  -3. 

OOO 

37,  g-fracl,  2,  -3. 

BREAKING  THE 

TIME  BARRIER 
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far  Adn**r*6  C HP '***'*  0**V 


38,  fracl 

39,  g-fracl ,  1 , 

-3. 

40,  g-fracl,  1010, 

-3. 

OOO 

45,  g-fracl,  1107, 

-3.14159 

46,  g-Operl,  1107, 

-3.14159 

47,  g-fracl ,  3, 

-3.14159 

48,  g-opEntered,  0, 

-3.14159 

49,  g-Operl,  0, 

-3.14159 

50,  g-Operl,  3, 

-3.14159 

51,  g-opEntered,  2, 

-3.14159 

52,  opEntered 

53,  g-opEntered,  1, 

-3.14159 

54,  g-opEntered,  1107, 

-3.14159 
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COSA 

•  -3. 14159  -  ten  steps  to  enter  eight  actions 

-  80%  efficient 

-  20%  of  cost  is  overhead 
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-3.14159  -  -  2.14195  =  thirty  steps  for 
eighteen  actions 

-  60%  efficient 

-  40%  of  cost  is  overhead 
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ITE 


•  -3.14159  -  fifty-four  steps  four  eight  actions 

-  14.8  %  efficient 

-  85%  of  cost  is  overhead 


•  -3.14159  -  -  2.14195  =  107  steps  for 
eighteen  actions 

-  16.8  %  efficient 

-  83%  of  cost  is  overhead 
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ITE  Enter  Only 


Trc=  1 ,  g-calc,  sig=  0  ; 

Operand= , 

Trc=  16,  g-ready, 

sig=  3  ; 

Operand=  0, 

Trc=  2,  g-calc,  sig=  0  ; 

Operand= , 

Trc=  17,  g-ready, 

sig=  0 ; 

Operand=  0, 

Trc=  3,  g-calc,  sig=  1  ; 

Operand^ , 

Trc=  18,  g-negatedl,  sig=  2  ; 

Operand^  0, 

Trc=  4,  g-clear; 

Operand^ , 

Trc=  19,  g-negatedl,  sig=  1  ; 

Operand^  -0, 

Trc=  5,  g-ready,  sig=  0  ; 

Operand^  0, 

Trc=  20,  g-negatedl,  sig=  100  ; 

Operand^  -0, 

Trc=  6,  g-ready,  sig=  2  ; 

Operand=  0, 

Trc=  21,  g-calc, 

sig=  100  ; 

Operand=  -0, 

Trc=  7,  g-ready,  sig=  1  ; 

Operand=  0, 

Trc=  22,  g-negatedl,  sig=  3  ; 

Operand=  -0, 

Trc=  8,  g-begin,  sig=  0  ; 

Operand^  0, 

Trc=  23,  g-final, 

sig=  0  ; 

Operand^  -0, 

Trc=  9,  g-begin,  sig=  2  ; 

Operand=  0, 

-  End  of  Analysis 

Trc=  10,  g-begin,  sig=  1  ; 

Operand^  0, 

T rc=  24,  g-calc, 

sig=  0  ; 

Operand^  -0, 

Trc=  11,  g-begin,  sig=  1107  ;  Operand=  0, 

Trc=  25,  g-calc, 

sig=  3  ; 

Operand=  -0, 

Trc=  12,  g-negatedl,  sig=  0 

;  Operand=  0, 

Trc=  26,  g-final, 

sig=  2  ; 

Operand=  -0, 

Trc=  13,  g-begin,  sig=  0  ; 

Operand=  0, 

Trc=  27,  g-final, 

sig=  1  ; 

Operand=  -0, 

Trc=  14,  g-calc,  sig=  0  ; 

Operand^  0, 

-  End  of  Analysis 

Trc=  15,  g-begin,  sig=  3  ; 

RRFAKINH  THF 

Operand^  0, 

Dr\ciMr\i ino  Inc 

TIME  BARRIER 
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A  COSA  State  Diagram 


•  Simple  state  view 

•  True  Behavior 

-  One  green  arrow 

•  False  Behavior 

-  One  red  arrow 

•  Temporal 

-  Trace 

-  Specification 

•  Compliance 
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Statechart  Comparison 


COSA  ITE 


COSA  State  Diagram  -  Calculator 
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Call  Diagram  Complexity 

COSA  ITE 
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COSA  and  Time 


•  Understanding  “Time”  in  software  means  not 
having  to  do  an  “if’  to  test  where  the  program  is 
executing  and  what  has  happened. 

-  23  Logic  points  in  COSA  calculator  example 

-  1 1 2  IF  statements  in  the  ITE  calculator 
example 
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Spatial  Software 


•  Must  leave  a  trail  of  “breadcrumb”  states 

•  Must  track  down  where  it  was 

-  This  is  pure  overhead 

•  Difficult  to  maintain 

•  Difficult  to  modify 
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Temporal  Software 


•  Keeps  a  temporal  pointer 

•  Reduces  complexity 

•  Eliminates  much  of  the  overhead 

•  Easier  to  maintain 

•  Easier  to  modify 
-  Add  new  rule 
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Software  Quality 


•  Testing  doesn’t  improve  quality 

-  Testing  fixes  quality  problems 

-  Quality  is  still  poor 

•  Temporal  engineering 

-  Improves  quality 

-  Reduces  overhead  logic 
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The  End  -  Definitions 

COS  A  -  Coherent  Object  System  Architecture 

-  U.S.  Patent  #6,345,387  abandoned  by  inventor 

-  Available  to  the  public  in  book:  Breaking  the  Time  Barrier 

BNF  -  Backus-Naur  Format 

-  Diagramming  the  logic  of  syntax 

ITE  -  If-Then-Else  logic 

-  commonly  referred  to  as  ‘spaghetti  code’ 

CMU  -  Carnegie  Mellon  University 

SEI  -  Software  Engineering  Institute  at  CMU 

CPU  —  Central  Processing  Unit 

UML  -  Unified  Modeling  Language 
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